$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft File: s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft (raw, json) Hash identifier: CBIxgA9Y3iDMVBUixsk0m81SHhLch61fCByXym8WXRg= Subject key identifier: B5:7B:85:AA:29:B7:90:CC:12:4A:96:6A:30:7F:B5:81:B6:23:B0:31 Authority key identifier: B3:62:43:7A:B6:7D:29:0C:5C:DF:EF:2F:62:B7:7E:DD:8A:9F:FA:44 Certificate issuer: /CN=A91CAE04/serialNumber=B362437AB67D290C5CDFEF2F62B77EDD8A9FFA44 Certificate serial: 0229 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft Manifest number: 021A Signing time: Thu 23 Jul 2026 04:14:52 +0000 Manifest this update: Thu 23 Jul 2026 04:14:51 +0000 Manifest next update: Thu 30 Jul 2026 04:14:51 +0000 Files and hashes: 1: s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.crl (hash: ZJYGc310VWQ4/yFMX1oalsvgeHp/Jv1aWQe90N+vmyw=) 2: 7E40FBBA09EF11EFAA24237EC4F9AE02.roa (hash: gNrtkZkKrQjv9VGO4d7icZehe6OSfQ3CzkQRSTsWYpg=) 3: ABA6DCF0030F11EFB12D8A18C4F9AE02.roa (hash: /BkRK1pd7XeoJPnuYhfXRxi+ZjaehytBLdeWASZ6S3g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.crl rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:14:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 553 (0x229) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CAE04, serialNumber=B362437AB67D290C5CDFEF2F62B77EDD8A9FFA44 Validity Not Before: Jul 23 04:14:51 2026 GMT Not After : Jul 30 04:14:51 2026 GMT Subject: CN=6a61953c-9118 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:71:0f:4f:32:f8:78:aa:76:54:ba:37:fb:90: 05:f0:f3:b7:bb:bc:14:cf:ce:12:f1:f0:c9:9e:05: 12:62:d0:9a:e8:30:d6:58:57:d4:18:76:1b:30:3f: 51:5e:a1:7a:11:19:dd:77:f6:3c:a1:26:96:27:81: b8:f7:d4:bd:cf:40:c5:0f:13:78:53:bf:0c:ae:07: 31:d9:61:ff:f2:b8:03:3f:50:1d:0a:ca:36:d1:ad: bf:51:9c:b4:a1:ba:fc:82:79:44:f4:db:50:38:c4: 9f:a8:93:c7:4f:42:8b:1b:b1:ac:93:1d:14:4c:98: bf:0f:06:5f:7f:45:68:53:ab:24:0a:d5:f3:77:ed: 9a:8e:cd:e1:88:2d:36:15:31:29:6f:10:ca:5b:58: 05:ae:f4:ee:86:fc:1d:40:28:c8:7b:4c:9f:ff:f1: 31:b5:5c:96:a9:ab:06:8d:f0:1b:7b:a5:cf:03:a0: 06:3c:ab:d0:b2:20:56:38:f6:e4:4a:ef:f7:df:30: 92:4e:32:8c:f5:53:42:25:d6:a2:10:da:e9:27:43: a4:70:92:f6:3e:bd:63:6d:ab:b0:6b:70:aa:5d:32: 5d:4a:df:9a:35:d6:f0:fd:2c:52:bc:e5:13:c4:cd: 92:dd:2f:f3:ef:dd:b5:bf:1b:1a:c0:2e:ec:2e:97: 06:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:7B:85:AA:29:B7:90:CC:12:4A:96:6A:30:7F:B5:81:B6:23:B0:31 X509v3 Authority Key Identifier: keyid:B3:62:43:7A:B6:7D:29:0C:5C:DF:EF:2F:62:B7:7E:DD:8A:9F:FA:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:0c:ff:b4:d2:91:51:df:47:91:7a:d9:63:17:6b:d7:94:66: 11:92:2a:d7:48:a2:ce:05:ac:88:82:1f:71:df:f7:f3:e5:64: 27:b3:ac:b2:6d:85:94:b3:5a:0a:c2:ce:e4:76:61:9d:23:a8: 4f:01:ac:04:86:f4:fc:ca:40:52:89:a3:f3:51:e4:65:18:f7: 07:04:3f:c1:ac:e9:2d:24:ba:cb:ff:56:e2:69:b6:37:9d:02: bc:2c:3c:10:1b:0c:78:40:71:67:b1:6c:3e:a6:d0:fd:66:f0: d0:61:4c:b1:fd:e7:a0:67:3b:44:b2:ce:a1:d4:7c:78:46:39: 1c:f5:96:a8:8f:84:f6:50:bc:f8:ea:61:92:2f:f8:f2:67:79: 0f:aa:56:71:93:4c:0a:ab:46:7b:50:f7:8a:1a:4c:d0:f6:15: 01:8f:50:ee:63:91:e9:50:2a:90:0c:cb:81:7f:b4:23:0b:7a: 5b:fe:39:99:d4:ee:ef:0b:9d:72:5e:23:18:4d:06:e3:f2:94: 34:a0:f6:3f:eb:ee:a0:de:ce:b8:9c:69:03:f4:ce:f9:47:fa: 16:43:a0:9c:e0:ca:2d:55:ce:8c:02:2e:43:30:61:2f:bb:39: 91:89:e5:63:7f:4f:ba:87:5a:0c:9c:eb:ad:ae:91:9e:5a:cc: ff:4c:68:d5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0FFMDQxMTAvBgNVBAUTKEIzNjI0MzdBQjY3RDI5MEM1Q0RGRUYyRjYyQjc3RURE OEE5RkZBNDQwHhcNMjYwNzIzMDQxNDUxWhcNMjYwNzMwMDQxNDUxWjAYMRYwFAYD VQQDEw02YTYxOTUzYy05MTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyXEPTzL4eKp2VLo3+5AF8PO3u7wUz84S8fDJngUSYtCa6DDWWFfUGHYbMD9R XqF6ERndd/Y8oSaWJ4G499S9z0DFDxN4U78Mrgcx2WH/8rgDP1AdCso20a2/UZy0 obr8gnlE9NtQOMSfqJPHT0KLG7Gskx0UTJi/DwZff0VoU6skCtXzd+2ajs3hiC02 FTEpbxDKW1gFrvTuhvwdQCjIe0yf//ExtVyWqasGjfAbe6XPA6AGPKvQsiBWOPbk Su/33zCSTjKM9VNCJdaiENrpJ0OkcJL2Pr1jbauwa3CqXTJdSt+aNdbw/SxSvOUT xM2S3S/z7921vxsawC7sLpcGmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLV7haop t5DMEkqWajB/tYG2I7AxMB8GA1UdIwQYMBaAFLNiQ3q2fSkMXN/vL2K3ft2Kn/pE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUUwNC85RDhGNzcyQTVG OTYxMUVFODM2MzhGM0VDNEY5QUUwMi9zMkpEZXJaOUtReGMzLTh2WXJkLTNZcWYt a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3MySkRlclo5S1F4YzMtOHZZcmQtM1lxZi1rUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QUUwNC85RDhGNzcyQTVGOTYxMUVFODM2MzhGM0VDNEY5QUUwMi9zMkpEZXJaOUtR eGMzLTh2WXJkLTNZcWYta1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKAz/tNKRUd9HkXrZYxdr15RmEZIq10iizgWsiIIfcd/38+VkJ7Ossm2FlLNa CsLO5HZhnSOoTwGsBIb0/MpAUomj81HkZRj3BwQ/wazpLSS6y/9W4mm2N50CvCw8 EBsMeEBxZ7FsPqbQ/Wbw0GFMsf3noGc7RLLOodR8eEY5HPWWqI+E9lC8+Ophki/4 8md5D6pWcZNMCqtGe1D3ihpM0PYVAY9Q7mOR6VAqkAzLgX+0Iwt6W/45mdTu7wud cl4jGE0G4/KUNKD2P+vuoN7OuJxpA/TO+Uf6FkOgnODKLVXOjAIuQzBhL7s5kYnl Y39PuodaDJzrra6RnlrM/0xo1Q== -----END CERTIFICATE-----Generated at Fri Jul 24 00:17:49 2026 by rpki-client